Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5504b207-7660-355d-b4d1-b8608879b4e0.roa
File:                     5504b207-7660-355d-b4d1-b8608879b4e0.roa (raw, json)
Hash identifier:          0i4cM5lNfTm5CgH4wPTAquVTJWa2RE7r9Fo37KLrSEs=
Subject key identifier:   93:BF:55:CB:67:3A:D0:C6:D6:F1:FB:F9:A0:E8:D7:76:55:28:C0:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B5DD206075D80CA19055C4B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5504b207-7660-355d-b4d1-b8608879b4e0.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        23.217.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:06:07:5d:80:ca:19:05:5c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=7ba40630-4918-4ad8-951a-924dce26eef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:7d:19:42:2a:92:62:74:52:4a:3d:2b:f8:
                    31:c3:54:65:95:1b:d1:19:dd:1b:3c:b0:fd:5a:14:
                    fe:b2:d2:b2:ae:c7:3b:ab:bd:18:db:88:17:1b:bb:
                    09:46:f7:a5:ed:3b:2e:2e:9c:03:6b:30:10:f1:01:
                    54:23:bd:54:1d:17:03:ef:ce:a9:85:36:f6:fb:a7:
                    91:eb:71:79:e3:ed:30:c8:7a:42:0a:94:5a:fa:f9:
                    5a:18:03:0c:4d:65:d0:96:69:47:71:c7:20:b4:2c:
                    04:2b:8c:f0:cd:7e:44:63:d4:79:e4:de:d3:4e:77:
                    87:bb:89:69:98:73:37:77:ef:8c:17:c7:8e:c0:8c:
                    e4:bd:36:af:af:ee:9c:6d:e1:8b:65:06:a3:96:83:
                    aa:9c:3b:50:53:d7:4f:22:70:c6:3c:6d:f5:4b:fd:
                    0c:f6:4e:01:65:e0:2c:23:05:6d:00:34:50:b1:c2:
                    c6:29:51:c6:ed:d2:3d:f1:34:1d:99:df:65:3a:6d:
                    86:86:2a:dd:6e:cf:fc:b2:0d:9e:e0:cc:da:96:7a:
                    3a:60:03:a4:74:d8:4f:f0:22:37:b3:c6:26:ea:1a:
                    92:ad:5a:98:92:e3:88:e7:17:82:e3:fc:8d:5b:68:
                    71:86:5c:95:48:13:59:76:2d:89:c5:b3:34:65:5e:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BF:55:CB:67:3A:D0:C6:D6:F1:FB:F9:A0:E8:D7:76:55:28:C0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5504b207-7660-355d-b4d1-b8608879b4e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9e:69:8d:2b:7f:9e:f8:6b:56:20:51:5e:00:0b:4b:fc:6a:
         7c:9a:79:93:b4:2a:e3:e6:3b:09:c0:57:8b:ca:fd:79:80:3a:
         00:12:fe:49:3e:07:63:2f:2c:c1:23:66:1d:b4:29:44:27:78:
         ec:ee:8b:08:68:39:13:35:4f:79:bb:6a:46:f8:4c:b2:20:0c:
         5e:41:de:04:7f:89:0d:e1:38:81:69:f7:5a:b2:7e:00:87:66:
         2d:b0:2f:c9:56:71:68:07:ee:97:6f:d4:00:f6:45:fe:3a:f3:
         91:ce:fb:4d:6b:3e:a0:e1:43:27:94:5c:db:df:b5:87:71:5b:
         09:ee:b9:48:f1:f7:20:d5:1c:62:31:7e:7f:a7:b3:ba:05:1b:
         8e:db:b1:98:d3:12:04:4d:95:5e:25:dc:b7:c5:4b:35:46:24:
         b5:74:e9:b9:b9:2f:56:cb:63:98:11:f4:a4:e7:6f:0d:85:e1:
         d2:3b:d6:7a:b8:2f:9f:60:e9:6a:00:fd:8b:64:a4:07:db:bf:
         07:de:e9:ed:32:24:7c:96:3f:89:87:f0:9f:15:96:ee:cd:60:
         2f:6e:1b:23:1b:44:8a:5c:bc:a5:cd:e6:5c:ce:a5:c4:7e:f9:
         1b:c9:f7:21:27:ca:5f:7f:c5:1c:93:95:4b:f1:9f:e4:8a:10:
         73:d2:32:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:54 2025 by rpki-client